Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa
File:                     51453d85-a115-3fa5-ad21-2178c8f20d33.roa (raw, json)
Hash identifier:          fpHr0cgQSBL9hnb9DMBzO6f4TN86LHIiXw8ZYogVsH4=
Subject key identifier:   40:3C:4B:DE:5B:37:1B:6C:DA:15:FC:7E:73:18:AF:B0:F2:4D:49:62
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F10378EB3306B4485EC81FD80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        2603:c02b::/35 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:8e:b3:30:6b:44:85:ec:81:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=17efb963-0a98-4933-988e-3c5f301eea2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:c0:e4:17:98:64:bf:76:1c:d2:d2:17:d4:
                    f4:44:6e:7f:75:23:e6:51:9a:db:75:65:03:6b:07:
                    5e:ff:e8:3f:e7:0c:4e:c6:12:ae:d1:08:a2:8d:b3:
                    77:2e:41:a2:8d:c2:48:9e:41:54:91:e8:d3:f2:52:
                    cc:ea:02:db:45:d9:a9:95:b7:f8:ab:34:09:e7:84:
                    a6:a2:71:59:c6:84:2c:93:82:c3:09:8f:d8:93:bd:
                    1c:40:17:ba:f4:38:5f:58:46:ec:e3:05:a8:70:c4:
                    5a:e8:02:10:14:0c:d9:c1:52:fb:c7:08:dc:8d:d5:
                    5c:83:a4:e0:bd:8f:0e:07:3e:52:bf:80:b2:3f:bd:
                    c8:0c:b8:37:a9:c2:94:94:eb:81:77:18:00:0d:07:
                    dc:83:af:4d:71:d7:51:fe:56:0d:d9:6a:70:12:36:
                    63:9c:9f:86:e9:cd:a5:3f:ed:47:8e:ea:23:4b:0b:
                    2e:c9:47:42:b8:e0:a2:bb:6b:a9:48:0c:83:7b:b8:
                    0d:25:07:3f:05:a8:02:a7:67:29:fa:d4:4c:42:8f:
                    b7:cc:18:a4:77:e2:33:ba:81:53:7b:fa:a2:c1:f7:
                    6d:6e:c9:1d:32:63:2c:ef:6d:5b:38:cb:00:3d:5d:
                    3b:52:80:c2:06:ff:b4:9a:96:d3:84:80:b1:56:95:
                    bf:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:4B:DE:5B:37:1B:6C:DA:15:FC:7E:73:18:AF:B0:F2:4D:49:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/51453d85-a115-3fa5-ad21-2178c8f20d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:c02b::/35

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6f:8a:af:da:46:7a:ff:81:04:79:1a:bd:5f:5c:af:36:31:
         f3:85:6f:3b:a9:10:a1:8a:ba:42:63:ad:ea:1c:b7:78:ac:71:
         54:95:73:a7:2f:6d:f2:a3:c3:03:88:2e:e5:9d:32:6f:b9:14:
         fa:3f:da:11:c8:44:5a:9f:75:ed:02:58:f3:d8:ab:dd:c1:92:
         87:de:15:7e:cc:fd:13:53:d3:43:4a:44:e8:55:01:0e:11:27:
         ce:51:62:07:5a:e4:8b:4d:37:6b:0f:b4:7c:4a:97:4d:d6:e5:
         50:b9:11:7e:01:59:97:25:29:60:da:01:ad:a1:36:ed:39:7d:
         28:03:65:0b:bc:e4:3f:df:55:92:22:7e:a6:a4:75:96:0e:cb:
         d4:58:d6:cc:b6:d6:08:ca:d8:ca:91:22:3c:87:be:b2:dc:53:
         5b:13:5b:71:43:09:28:b3:54:a7:3e:7f:90:e2:e5:f8:ea:6f:
         ae:9d:be:c9:df:0a:18:d0:14:a5:b9:70:02:eb:9e:e0:02:5d:
         f0:6c:72:9f:18:a2:7f:5b:b6:14:ca:c2:3d:9a:f2:2d:98:08:
         cf:09:9f:df:4c:00:d5:66:7c:68:79:70:83:38:2f:ff:4e:56:
         41:3b:ff:3c:36:57:ab:ed:e5:72:64:d0:f7:8c:e4:2b:ed:42:
         3c:ec:f3:42
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8QN46zMGtEheyB/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk
MTdlZmI5NjMtMGE5OC00OTMzLTk4OGUtM2M1ZjMwMWVlYTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv/A5BeYZL92HNLSF9T0RG5/dSPmUZrbdWUD
awde/+g/5wxOxhKu0QiijbN3LkGijcJInkFUkejT8lLM6gLbRdmplbf4qzQJ54Sm
onFZxoQsk4LDCY/Yk70cQBe69DhfWEbs4wWocMRa6AIQFAzZwVL7xwjcjdVcg6Tg
vY8OBz5Sv4CyP73IDLg3qcKUlOuBdxgADQfcg69NcddR/lYN2WpwEjZjnJ+G6c2l
P+1HjuojSwsuyUdCuOCiu2upSAyDe7gNJQc/BagCp2cp+tRMQo+3zBikd+IzuoFT
e/qiwfdtbskdMmMs721bOMsAPV07UoDCBv+0mpbThICxVpW/uwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEA8S95bNxts2hX8fnMYr7DyTUliMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTE0NTNkODUtYTExNS0z
ZmE1LWFkMjEtMjE3OGM4ZjIwZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFJgPAKwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAZm+Kr9pGev+BBHkavV9crzYx84VvO6kQoYq6QmOt6hy3eKxxVJVz
py9t8qPDA4gu5Z0yb7kU+j/aEchEWp917QJY89ir3cGSh94Vfsz9E1PTQ0pE6FUB
DhEnzlFiB1rki003aw+0fEqXTdblULkRfgFZlyUpYNoBraE27Tl9KANlC7zkP99V
kiJ+pqR1lg7L1FjWzLbWCMrYypEiPIe+stxTWxNbcUMJKLNUpz5/kOLl+Opvrp2+
yd8KGNAUpblwAuue4AJd8Gxynxiif1u2FMrCPZryLZgIzwmf30wA1WZ8aHlwgzgv
/05WQTv/PDZXq+3lcmTQ94zkK+1CPOzzQg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:37 2026 by rpki-client